Cyber Supply Chain Risk Management (C-SCRM) Analysis

The contract focuses on conducting comprehensive assessments and developing mitigation strategies targeting IT supply chain risks. Responsibilities include evaluating vendors and monitoring third-party entities in accordance with federal standards to enhance cybersecurity within the supply chain. The efforts aim to identify vulnerabilities and implement risk management practices to secure critical IT infrastructure and ensure resilience. This subcontract opportunity is issued by the General Services Administration (GSA), specifically under the Federal Acquisition Service’s IT contract office, with the place of performance in Washington, DC. The contract falls under NAICS code 541611, indicating management consulting services, and is set aside specifically for Service-Disabled Veteran-Owned Small Businesses (SDVOSBC). The solicitation was posted on June 12, 2026, with a response deadline of June 22, 2026. This opportunity supports the federal government's commitment to strengthening cybersecurity across its supply chain through targeted risk management analysis and ongoing oversight.